Privacy Policy for Flowers Westcombe Park Customers

Introduction

At Flowers Westcombe Park, we are committed to safeguarding your privacy and handling your personal information with utmost care. This Privacy Policy outlines how we collect, use, and protect your personal data when you place orders with us from Westcombe Park and its surrounding districts. We adhere to the General Data Protection Regulation (GDPR) and relevant UK data protection laws in handling all customer information.

Scope of This Policy

This Privacy Policy applies to all customers placing orders with Flowers Westcombe Park, including those located in Westcombe Park and the neighbouring districts. The policy covers data collected via our website, phone, in-person ordering, or other sales channels.

What Data We Collect

In order to fulfil your orders and provide a quality service, we may collect the following categories of personal data:

• Contact Information: Full name, phone number, and address of the customer and recipient
• Order Details: Items purchased, delivery instructions, order amount
• Payment Information: Transaction identifiers (note: card information is processed securely by our payment providers and not stored by us)
• Communication Records: Any correspondence relating to your order, feedback, or enquiries
• Technical Information: IP address, browser type, and location (when you use our website)

Lawful Basis for Data Processing

We collect and process your data on the following lawful bases in accordance with Article 6 of the GDPR:

• Contractual Necessity: Processing required to fulfil your order with us, including delivery and after-sales support
• Legal Obligation: Compliance with legal, tax, or regulatory requirements
• Legitimate Interests: Improving our services, handling queries, and preventing fraud
• Consent: Where we rely on your consent, for example, when sending marketing messages (you may withdraw your consent at any time)

How We Use Your Data

Your personal information is used to:

• Process and deliver your flower order
• Communicate order confirmations, dispatch, and delivery updates
• Manage payment and detect any fraudulent activities
• Respond to your queries, feedback, or complaints
• Comply with legal and regulatory obligations
• (If consent is provided) Send you occasional news, special offers, or updates about our services

Data Retention Period

We retain your personal data only for as long as necessary to fulfil the purposes described above and to meet our legal obligations. Typically, customer order records are retained for up to seven years in line with accounting and tax requirements. We regularly review the need to retain personal data and securely delete or anonymise information that is no longer necessary.

Data Processors and Third Parties

We may share your information with trusted third-party service providers who assist us with payment processing, delivery services, IT support, or administrative tasks. These processors are contractually required to handle your data in accordance with GDPR, only act on our instructions, and maintain security and confidentiality. Examples include payment gateways and couriers. We do not sell or share your data with unauthorised third parties for their independent use.

International Data Transfers

Your data may be processed in or transferred to a location outside the UK or European Economic Area (EEA) if our approved service providers operate internationally. In such cases, we take steps to ensure that your personal information is adequately protected, such as implementing Standard Contractual Clauses or ensuring providers are part of recognised certification schemes.

User Rights Under GDPR

As a customer, you have the following rights with respect to your personal data:

• Right of Access: Request to view the personal data we hold about you
• Right to Rectification: Request corrections of inaccurate or incomplete information
• Right to Erasure: Ask for deletion of your data when it is no longer needed or processed unlawfully
• Right to Restrict Processing: Request the restriction of processing under certain circumstances
• Right to Data Portability: Obtain a copy of your data in a structured, machine-readable format
• Right to Object: Object to processing where we rely on legitimate interests or for direct marketing
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw it at any time

To exercise any of your rights, please contact us using the details on our website or by writing to our business address. We aim to respond to all requests within one month, in compliance with applicable data protection law.

Your Responsibility

Please ensure that any personal information you provide on behalf of someone else, such as the recipient of a flower delivery, is provided with the individual’s knowledge and consent where appropriate.

Data Security

We implement appropriate organisational and technical measures to protect your personal data from unauthorised or unlawful processing, accidental loss, destruction, or damage. All employees and processors are subject to confidentiality obligations.

Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, regulatory requirements, or for other reasons. The most current version will always be displayed on our website. We encourage you to review this policy periodically.

Queries and Complaints

Should you have any questions or concerns regarding how we handle your personal data, please contact us using the details available on our website. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) if you believe your data has been processed unlawfully.

Conclusion

Flowers Westcombe Park is dedicated to treating your personal information with respect and transparency. By placing an order, you acknowledge that you have read and understood this Privacy Policy and consent to the use of your data as described herein.